You can now listen to this article
Cybercrime continues to grow, and no one is immune. Insurance agencies, small businesses, and even large municipalities like Baltimore are being hit with ransomware attacks and other types of cybercrime.
What would you do if your office was hit with a ransomware attack or one of your employees wired money in response to a phishing email?
I have written a couple of articles on how to spot phishing emails that you can review here and here. The best defense against a phishing attack is to make sure all employees are trained to question any email that doesn’t “look right.”
But even extensive employee training won’t guarantee that your organization won’t be a victim of a cybercrime attack.
Fortunately, the FBI maintains a website where you can report an incident. The full name is the Federal Bureau of Investigation Internet Crime Complaint Center (IC3).
IC3 Mission Statement
The mission of the Internet Crime Complaint Center is to provide the public with a reliable and convenient reporting mechanism to submit information to the Federal Bureau of Investigation concerning suspected Internet-facilitated criminal activity and to develop effective alliances with law enforcement and industry partners. Information is analyzed and disseminated for investigative and intelligence purposes to law enforcement and for public awareness.
Cybercrime: How to File a Report
The IC3 accepts online Internet crime complaints from either the actual victim or from a third party to the complainant. They can best process your complaint if they receive accurate and complete information from you. Therefore, you will need to provide the following information when filing a complaint:
- Victim’s name, address, telephone, and email
- Financial transaction information (e.g., account information, transaction date and amount, who received the money)
- Subject’s name, address, telephone, email, website, and IP address
- Specific details on how you were victimized
- Email header(s)
- Any other relevant information you believe is necessary to support your complaint
In addition to an Internet crime complaint, you can also use the site to:
- Submit a suspected terrorism or threat complaint with the FBI
- Submit a complaint with the National Center for Missing and Exploited Children (NCMEC)
Here are direct links to some of the additional resources on the site:
- IC3 Brochure (PDF)
- IC3 Fraud Alert (PDF)
- Ransomware Brochure (PDF)
- The 2018 Internet Crime Report (PDF) is also a great resource for you and your clients.
I hope you never need to access this resource and file a complaint. But good risk management practices include having information immediately available so you know exactly what steps to take in case you are a victim of a cybercrime.
I also hope you recognize that this information should be made available to your clients. The additional resources on the site could also be part of your marketing communication as you attempt to protect your clients with Cyber Liability Insurance.
Does your organization have a cybercrime security policy that includes this information?